[PLUG] Spam
Mark Morgan
lemming at attbi.com
Mon Feb 17 22:52:02 UTC 2003
Wil Cooley wrote:
> On Mon, 2003-02-17 at 21:22, Mark Morgan wrote:
>
>>This was an interesting spam. It had tons of these in the middle of the
>>words of an html mail. <!--RHBuW-->
>>
>>Probably to defeat searches for particular words. Though I would think
>>that the bogus html comments would flag it.
>
>
> Actually, the point is to defect check-sum anti-spam tools. These spam
> mailers generate random characters so every or most messages are
> different, so when Razor and DCC makes check-sums of the messages,
> they're different.
Maybe simple checksums. It wouldn't take much to strip these out and do
a checksum of them. The comment markers should send up a red flag.
More information about the PLUG
mailing list